-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Sep 2026 15:42:29 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: armel
Version: 1:9.20.29-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.29-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.29
    - [CVE-2026-19668] Prevent excessive CPU use validating crafted DNSSEC responses.
    - [CVE-2026-19033] Require a TSIG on every message of incoming zone
      transfers.
    - [CVE-2026-77119] Prevent a DNSSEC downgrade of secure delegations via
      unrelated NSEC3 records.
    - [CVE-2026-19666] DNS64 with `break-dnssec` could cause an assertion
      failure.
    - [CVE-2026-19667] Reject oversized negative cache records.
    - [CVE-2026-19662] Prevent resolver crash with cached DNSSEC proofs.
    - [CVE-2026-75029] Discard repeated SOA, CNAME, and DNAME records when
      parsing DNS messages.
    - [CVE-2026-77692] Fix an unauthenticated crash on HTTPS using SIG(0).
    - [CVE-2026-81736] Cached HTTPS/SVCB aliases could exhaust resolver
      CPU.
    - [CVE-2026-76163] Prevent TKEY queries from terminating `named`
      without global options.
    - [CVE-2026-80274] Fix crash on wildcard answers carrying both NSEC and
      NSEC3 proofs.
    - [CVE-2026-81563] Following HTTPS/SVCB aliases could leak resolver
      cache memory.
Checksums-Sha1:
 7ec2d2be3965d55b8fde8cfe4edef7eee998e350 646776 bind9-dbgsym_9.20.29-1~deb13u1_armel.deb
 31c68ba53efdd1dfe68d48fe1a723fa6ba5fcd6a 297292 bind9-dev_9.20.29-1~deb13u1_armel.deb
 b5ef843b6146d103da355cdd19e3bf89df609f60 394316 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_armel.deb
 87f6a34fe745ab173d10eeb18a8d120e4a7e3ddf 156636 bind9-dnsutils_9.20.29-1~deb13u1_armel.deb
 18064acf35466e39d17fad5e9c8f45a715c731fa 104008 bind9-host-dbgsym_9.20.29-1~deb13u1_armel.deb
 0c22108453b7052558e3cbde9e33f85ace1f4797 53380 bind9-host_9.20.29-1~deb13u1_armel.deb
 712cafa0a633fff68cd4003825799d5d8194632b 4101092 bind9-libs-dbgsym_9.20.29-1~deb13u1_armel.deb
 46f4773a80b2bffca4fd867cbddb995d4a790c41 1085184 bind9-libs_9.20.29-1~deb13u1_armel.deb
 86fb408c1f8a3f2069e1fff4c718c6c48b0e4751 379004 bind9-utils-dbgsym_9.20.29-1~deb13u1_armel.deb
 3f421ca338ba96f4e40b28a1ebc298bc594b2e29 174572 bind9-utils_9.20.29-1~deb13u1_armel.deb
 452555a55f5750717173f3119f48fbd192a0898b 10496 bind9_9.20.29-1~deb13u1_armel-buildd.buildinfo
 d1269d7d8c1567fba5e7c1f4c7815f20661b81c1 239708 bind9_9.20.29-1~deb13u1_armel.deb
Checksums-Sha256:
 31ca247ed3cd721521e9687fd19a23a1a734517686d9df70607c69cd8e4f253d 646776 bind9-dbgsym_9.20.29-1~deb13u1_armel.deb
 ff174f665747d13cb3aaa2eba7002f38569448367a9b1555ba0b358fe763bb35 297292 bind9-dev_9.20.29-1~deb13u1_armel.deb
 5d2896c833095e7cec5bb52450283caffc6ba97392117627b9e38dc225639c98 394316 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_armel.deb
 6c04b95575fc1d46c579e7a86c6fed3223e7ddbd600c71af84c413d7c66987d1 156636 bind9-dnsutils_9.20.29-1~deb13u1_armel.deb
 9f3cfd6815f65fa3a72e3b02e070c931d272524366898c44ff9a28c398749e4e 104008 bind9-host-dbgsym_9.20.29-1~deb13u1_armel.deb
 6fe16c6b43dab088efc021d97c169fdf6cc6f144b34bf281a57c7aab4d9d1256 53380 bind9-host_9.20.29-1~deb13u1_armel.deb
 f6e7a3ec9ce9d95dd819fa2c35ab34c25ea470bac4f56b22f71487b5a0898bc8 4101092 bind9-libs-dbgsym_9.20.29-1~deb13u1_armel.deb
 07618578e8f3b23b5ca620eed995e8fd472d81389e541353a6aca21baf18a305 1085184 bind9-libs_9.20.29-1~deb13u1_armel.deb
 03990a44e29305a1c728cd604c07e45b3b240176b67504c3c5bcec6a33ea1ff5 379004 bind9-utils-dbgsym_9.20.29-1~deb13u1_armel.deb
 7927f51715b419cd3ff474f1d97660ba348b93e6526ec624a2f2977a69bbf3ba 174572 bind9-utils_9.20.29-1~deb13u1_armel.deb
 87be5d279967c80ffaeedded30b95c4e5633c6a7f7de13ea9358e5917acc6efc 10496 bind9_9.20.29-1~deb13u1_armel-buildd.buildinfo
 73251627b6ffead4a625dcac578b32a8b50e3a0b7d62133cf927396412ce6d4c 239708 bind9_9.20.29-1~deb13u1_armel.deb
Files:
 9b76bcc0ed034f004f175b8edb30caa0 646776 debug optional bind9-dbgsym_9.20.29-1~deb13u1_armel.deb
 ef4682a518f6969647fbde2bfcebb13c 297292 devel optional bind9-dev_9.20.29-1~deb13u1_armel.deb
 a8c55df53b95248609587e78e2c43322 394316 debug optional bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_armel.deb
 e749255d0b22f5d6486e4027f1987e00 156636 net standard bind9-dnsutils_9.20.29-1~deb13u1_armel.deb
 9f8d52f1bb3006d65afa970bc96cd418 104008 debug optional bind9-host-dbgsym_9.20.29-1~deb13u1_armel.deb
 2510d31d0cba3848bdc075ab8a3d6608 53380 net standard bind9-host_9.20.29-1~deb13u1_armel.deb
 0464d19a1b6f650922a90d22807bc054 4101092 debug optional bind9-libs-dbgsym_9.20.29-1~deb13u1_armel.deb
 9d968f9f3b7ec14320f2858755f8df22 1085184 libs standard bind9-libs_9.20.29-1~deb13u1_armel.deb
 1c6cb837162330e8fe215651efb3e366 379004 debug optional bind9-utils-dbgsym_9.20.29-1~deb13u1_armel.deb
 cdd7ccbe5bfe34a8dd09ee064fb35ff8 174572 net optional bind9-utils_9.20.29-1~deb13u1_armel.deb
 2a6e54f7328d21505c2eb9d6d8ae7980 10496 net optional bind9_9.20.29-1~deb13u1_armel-buildd.buildinfo
 5aa66895dde40fa31f8adf99dfb19148 239708 net optional bind9_9.20.29-1~deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=gJuq
-----END PGP SIGNATURE-----